@floegence/redevplugin-ui 3.7.0 → 3.7.1

package/dist/openapi.gen.d.ts

@@ -3632,7 +3632,10 @@ export interface components {
             schema_version: "redevplugin.web_surface.v1";
             /** Format: uri */
             origin: string;
-            /** Format: uri */
+            /**
+             * Format: uri
+             * @description Exact canonical authenticated host origin: HTTPS, HTTP localhost, or HTTP canonical IPv4 127.0.0.0/8 or IPv6 ::1. Loopback IP permission applies only to the parent; child origins retain their independent allocated hostname.
+             */
             parent_origin: string;
             /** Format: uri */
             bootstrap_url: string;

package/dist/surface.js

@@ -2513,7 +2513,9 @@ export function isWebSurfaceDocument(value) {
         const origin = new URL(String(value.origin)), parent = new URL(String(value.parent_origin));
         const bootstrap = new URL(String(value.bootstrap_url)), entry = new URL(String(value.entry_url));
         const validOrigin = (u, raw) => u.origin === raw && !u.username && !u.password && (u.protocol === "https:" || (u.protocol === "http:" && (u.hostname === "localhost" || u.hostname.endsWith(".localhost"))));
-        return validOrigin(origin, value.origin) && validOrigin(parent, value.parent_origin) && origin.hostname !== parent.hostname &&
+        const loopbackParent = parent.origin === value.parent_origin && !parent.username && !parent.password && parent.protocol === "http:" &&
+            (parent.hostname === "[::1]" || /^127(?:\.(?:0|[1-9]\d{0,2})){3}$/.test(parent.hostname));
+        return validOrigin(origin, value.origin) && (validOrigin(parent, value.parent_origin) || loopbackParent) && origin.hostname !== parent.hostname &&
             bootstrap.origin === origin.origin && !bootstrap.username && !bootstrap.password && bootstrap.pathname === "/_redevplugin_web/bootstrap" && !bootstrap.search && /^#[a-f0-9]{64}$/.test(bootstrap.hash) &&
             entry.origin === origin.origin && !entry.username && !entry.password && !entry.search && !entry.hash && !entry.pathname.startsWith("/_redevplugin_web/");
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floegence/redevplugin-ui",
-  "version": "3.7.0",
+  "version": "3.7.1",
   "license": "MIT",
   "type": "module",
   "repository": {
@@ -36,7 +36,7 @@
     "dist"
   ],
   "dependencies": {
-    "@floegence/redevplugin-contracts": "3.7.0",
+    "@floegence/redevplugin-contracts": "3.7.1",
     "@noble/hashes": "2.4.0"
   },
   "publishConfig": {